CVE-2026-11824: SQLite FTS5 Heap Buffer Overflow
🟠High | Source: Microsoft Security Response Center A heap buffer overflow vulnerability has been discovered in SQLite versions prior to 3.53.2, triggered via the Full-Text Search 5 (FTS5) extension’s fts5ChunkIterate function. An attacker able to supply crafted SQL queries could potentially exploit this to corrupt memory, leading to application crashes or arbitrary code execution. Given SQLite’s widespread use across cloud services, applications, and managed databases, the blast radius is significant. ...